DOD Overhauls Network to Thwart Crackers

Toddius Maximus wrote in to send us a CNN story about the Departent of Defense Overhauling their network to prevent cracker attacks. How's that for a feeling of warm fuzzies?

Comments

Let me summarize the article for you...

[Kurt Gray]

Translation:

A DOD spokesman has publicly stated that as soon as
their sys admins are tired of playing Quake, they
fully intend to install tcp_wrapper on most of
their systems, just as soon as they're done
sorting their bookmarks and reading Slashdot
they promised they would get right on it and
install that wrapper any day now, and if they
can have Friday off, they may even upgrade and patch
the old buggy daemons they left running, but
as one DOD sys admin stated "Phf! That's not my job!"
then he quickly returned his attentions to a
heated Phantom Menace debate on "Ain't It Coll News."

Um, this is news?

[MikeTurk]

So, starting sometime in July, they're going to filter some protocols, maybe POP, maybe telnet, but they haven't decided what to filter yet. Hmm...the first thing I did on my Linux boxen was to turn off any protocols that I didn't use and to set up ipchains to filter the rest. I also set Samba not to listen to the outside world, but only to my 192.168.0.* C network. And I'm new at this.

Typical government: A network that is several years old finally gets the consultant once-over and the committee decides to form a committee to look into what to do.

Mike
--